Thanks, Arran. I did pick apart a Dell 5210n this morning that looked hopeful- 
but regardless of what you configured it refused to functionally do anything 
beyond LEAP. Sigh...

-Lee

Lee H. Badman
Wireless/Network Engineer
Information Technology and Services
Syracuse University
315 443-3003

-----Original Message-----
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:[email protected]] On Behalf Of Arran Cudbard-Bell
Sent: Monday, June 08, 2009 2:26 PM
To: [email protected]
Subject: Re: [WIRELESS-LAN] Wireless Printers on 802.1x Network

Hi Lee,

> Given that we are running 802.1x PEAP w/ MS-CHAPv2, WPA/TKIP on main
> prod wireless network, has anyone with same network setup found a
> wireless printer that will work as a client device? Looking for real
> examples of functional printers- several wireless printers look
> potentially good until you go to set them up. If you know of any the
> work in the real world (with 802.1x PEAP w/ MS-CHAPv2, WPA/TKIP) the
> information would have great value.

Only negative information i'm afraid. Last time I checked the HP JetDirect 
supplicant was running something that claimed to be PEAPv0 (had the PEAPv0 
flag), but acted more like PEAPv1 (including full 
EAP headers in the inner tunnel). Our RADIUS servers (FreeRADIUS 2.*) 
categorically refused to authenticate these devices (because of the additional 
headers in the inner tunnel), and i've heard 
reports that IAS rejects them as well.

This was on wired, but the supplicant is probably the same for both wired and 
wireless interfaces (it'd make no sense implementing EAP twice).

Regards,
Arran
-- 
Arran Cudbard-Bell ([email protected]),
Authentication, Authorisation and Accounting Officer,
Infrastructure Services (IT Services),
E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT
DDI+FAX: +44 1273 873900 | INT: 3900
GPG: 86FF A285 1AA1 EE40 D228 7C2E 71A9 25BB 1E68 54A2

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to